Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa
File:                     323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa (raw, json)
Hash identifier:          CZfxF7JSZNWBQ0Fz3CHpWzarFYGzBE3tYJtmBTx7m1I=
Subject key identifier:   EE:94:0F:69:BF:7D:7A:25:9F:20:47:F9:5E:BC:EB:52:E4:56:A0:01
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       1C7E5606D19FBA7387FD6738E3A3C493318DDF24
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa
Signing time:             Wed 27 Aug 2025 16:20:10 +0000
ROA not before:           Wed 27 Aug 2025 16:15:10 +0000
ROA not after:            Wed 26 Aug 2026 16:20:10 +0000
asID:                     13335
IP address blocks:        2803:f800:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Sep 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7e:56:06:d1:9f:ba:73:87:fd:67:38:e3:a3:c4:93:31:8d:df:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Aug 27 16:15:10 2025 GMT
            Not After : Aug 26 16:20:10 2026 GMT
        Subject: CN=EE940F69BF7D7A259F2047F95EBCEB52E456A001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:01:32:6d:54:a2:6f:37:fb:0f:88:73:4b:
                    ac:9a:29:7f:73:43:07:65:59:48:a3:79:6a:af:25:
                    d3:4a:bf:29:56:c8:6a:49:39:72:2e:db:ff:d4:b1:
                    3f:4a:04:f3:43:90:00:0f:00:06:5b:de:c0:88:70:
                    4c:a2:05:20:c5:f4:06:cd:8c:b6:13:32:34:ce:41:
                    a5:cf:e5:f3:07:fb:63:70:f4:39:ca:50:4a:c5:3f:
                    55:96:c2:a3:93:e3:3c:2e:6e:75:99:f5:72:60:3d:
                    f6:b7:7f:de:f0:f0:98:b6:5c:6d:98:b9:1c:b4:7a:
                    69:c7:40:c6:71:94:a4:fd:75:02:52:d4:02:ef:ca:
                    8f:b0:db:92:c1:ad:01:a7:19:59:4c:3c:a8:85:78:
                    21:e6:73:8b:71:5d:85:57:1f:3f:eb:06:e1:4e:92:
                    86:7b:15:43:12:78:71:1a:bb:4e:f9:19:d7:80:fe:
                    f5:44:b7:b9:3f:3a:f2:14:a4:5f:d9:86:41:f3:cf:
                    95:b4:e8:c9:b8:9e:59:33:aa:9c:80:a6:81:83:d8:
                    a8:ef:8b:dd:78:51:49:58:b7:eb:7f:b5:27:4a:30:
                    b8:6b:b3:1c:72:eb:6f:fc:31:82:c9:9c:e0:a1:5a:
                    7b:85:14:5c:7f:d1:3d:ff:87:92:00:3e:48:68:08:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:94:0F:69:BF:7D:7A:25:9F:20:47:F9:5E:BC:EB:52:E4:56:A0:01
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35333a3a2f34382d3438203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:36:f2:8a:57:12:73:2c:1c:da:b0:01:64:a9:85:36:93:bc:
         0e:1a:a0:c0:17:a7:2a:e7:0e:d3:eb:20:30:18:58:fa:a6:90:
         fb:09:83:b0:94:3e:e8:36:06:03:02:06:b5:5e:e9:94:24:3b:
         5f:5a:d2:22:87:ce:c0:fa:2b:04:e3:92:d5:41:6b:30:d7:09:
         b3:f4:31:71:90:fa:39:3a:7d:d5:80:c1:e1:f4:58:e2:83:55:
         5d:b7:43:d3:61:61:86:30:43:39:6e:38:00:22:5d:6c:3c:71:
         ac:a5:97:46:b4:fd:91:fb:2a:c1:d2:74:89:24:8b:52:20:4b:
         71:c6:32:a1:75:e0:b1:d8:84:d0:a3:33:92:13:d3:6a:fc:16:
         26:ac:a4:26:09:2b:a6:cd:a3:a5:be:61:d4:7d:4d:8e:ae:47:
         00:9d:a1:86:63:68:4b:e8:b1:c7:2b:1f:cf:84:84:7c:ab:d1:
         41:44:97:42:65:93:dc:ac:00:d6:92:6f:1e:ae:4b:4b:3e:9f:
         c4:df:e5:db:5f:fd:ec:d0:02:67:10:77:66:0a:0e:19:73:b0:
         23:b8:e3:1f:8f:86:cc:8d:55:a3:fd:34:12:91:1f:e6:b6:83:
         e6:9f:0a:2c:61:66:81:c2:81:c7:ff:9e:3a:a9:29:e9:1d:a2:
         07:eb:be:2d
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUHH5WBtGfunOH/Wc446PEkzGN3yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBRUVEN0NCOTkwQzREMzc0NTcyNTFDNjQ2QzM1NUE5
MTY5ODRBMDAeFw0yNTA4MjcxNjE1MTBaFw0yNjA4MjYxNjIwMTBaMDMxMTAvBgNV
BAMTKEVFOTQwRjY5QkY3RDdBMjU5RjIwNDdGOTVFQkNFQjUyRTQ1NkEwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzwEybVSibzf7D4hzS6yaKX9z
QwdlWUijeWqvJdNKvylWyGpJOXIu2//UsT9KBPNDkAAPAAZb3sCIcEyiBSDF9AbN
jLYTMjTOQaXP5fMH+2Nw9DnKUErFP1WWwqOT4zwubnWZ9XJgPfa3f97w8Ji2XG2Y
uRy0emnHQMZxlKT9dQJS1ALvyo+w25LBrQGnGVlMPKiFeCHmc4txXYVXHz/rBuFO
koZ7FUMSeHEau075GdeA/vVEt7k/OvIUpF/ZhkHzz5W06Mm4nlkzqpyApoGD2Kjv
i914UUlYt+t/tSdKMLhrsxxy62/8MYLJnOChWnuFFFx/0T3/h5IAPkhoCDVpAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU7pQPab99eiWfIEf5XrzrUuRWoAEwHwYDVR0j
BBgwFoAUbK7tfLmQxNN0VyUcZGw1WpFphKAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OUUxMUE0RkQ3NkZBMzE4OEEwODdFNzkyQTk2MTFDNTBG
NDA0RDNDOUVENDNDOEVEQUQyRjVGMEI4RUYyRkJELzAvNkNBRUVEN0NCOTkwQzRE
Mzc0NTcyNTFDNjQ2QzM1NUE5MTY5ODRBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0FFRUQ3Q0I5OTBDNEQzNzQ1
NzI1MUM2NDZDMzU1QTkxNjk4NEEwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTlFMTFBNEZENzZGQTMxODhBMDg3RTc5MkE5NjExQzUwRjQwNEQzQzlF
RDQzQzhFREFEMkY1RjBCOEVGMkZCRC8wLzMyMzgzMDMzM2E2NjM4MzAzMDNhMzUz
MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A/gAAFMwDQYJKoZIhvcNAQELBQADggEBAAc28opXEnMsHNqwAWSphTaTvA4aoMAX
pyrnDtPrIDAYWPqmkPsJg7CUPug2BgMCBrVe6ZQkO19a0iKHzsD6KwTjktVBazDX
CbP0MXGQ+jk6fdWAweH0WOKDVV23Q9NhYYYwQzluOAAiXWw8cayll0a0/ZH7KsHS
dIkki1IgS3HGMqF14LHYhNCjM5IT02r8FiaspCYJK6bNo6W+YdR9TY6uRwCdoYZj
aEvosccrH8+EhHyr0UFEl0Jlk9ysANaSbx6uS0s+n8Tf5dtf/ezQAmcQd2YKDhlz
sCO44x+PhsyNVaP9NBKRH+a2g+afCixhZoHCgcf/njqpKekdogfrvi0=
-----END CERTIFICATE-----
Generated at Wed Sep 3 13:55:45 2025 by rpki-client